Creating A More Robust Facility Risk Assessment

Transcription

1 Enhancing Resiliency: Creating A More Robust Facility Risk Assessment Brian Durand & Mark Norton DRJ Spring World 2010 Agenda Risk Assessment Overview Risk Assessment Overview Facility Risk Assessment Strategy & Drivers Data Collection Model Data Mapping and Weighting Model g Reporting Method

2 Risk Assessments Objective: Identify Analyze Evaluate potential risks What s out there: Many flavors of Risk Assessments available covering a broad spectrum of information. Prepackaged, home grown, consultant built Typically in a spreadsheet or matrix format Use the right one: Utilizes industry specific guidelines Use one that works for your environment Good fit with other assessments already being done Facility Based Risk Assessments Communications Failure Flood Power Loss Location Frequency Impact Inherent Risk Controls Effect of controls Residual Risk - A Backup Switch, Dual Feed, Maintenance Plan - B Backup Switch, Dual Feed, Maintenance Plan 2 3.0

3 Drivers for Changes Highly subjective and inconsistent responses to information No defined controls or control metrics Standardized scoring model Incorporate historical data for gap analysis Expanded information categories Cleaner, simpler user interface Automated, flexible & scalable Model Overview Data Collection Data Map & Weighting Controls Category Roll-up History Location Overall Score

4 Data Collection Four Categories of Data Collected Data Controls Data Location Specific Data Event History Data Data Collection Data Information that describes physical parameters of a building. Population Single / Multi Story Single / Multi Tenant Food Prep / Break Areas Parking Areas Server Rooms Bank Branch Communications Infrastructure Area Access & Management Loading Docks Electrical Rooms Basements Data Comm Equipment Voice Equipment

5 Data Collection Controls Data Information that describes mitigation/avoidance measures that are in place. Generators UPS Card Access Security Guards Redundant Systems Sump Pumps Vehicle Barriers CCTV Monitored / Recorded Processes Procedures Maintenance Safety Equipment Documentation Testing Data Collection Location Data Information that describes the local area s geographic g and situational conditions. Tornado Zone Seismic Activity Hurricane Zone Flood Zone Terrorism Vulnerability Index Crime Rate Index EPA Data (ECHO & TRI) (Enforcement and Compliance History) (Toxic Release Inventory)

6 Data Collection Location Data Information that describes the local area s geographic g and situational conditions. Draw information from authoritative sources USGS U.S. Geographical Survey NOAA National Oceanic & Atmospheric Administration USACE U.S. Army Corps of Engineers FEMA Federal Emergency Management Agency EPA Environmental Protection Agency DHS Department of Homeland Security Internal Organization Groups Data Collection Event History Data Any internal or external events that had any effects on normal business operations. Fire Explosion Flooding Power Failure Water Loss Environmental Hazard Transportation Disruption Intruders Sabotage Communications Failure Public Events Seismic Activity

7 Data Collection Tool Your Model Consider how you want the collection to work and how to manage the data. Simple user interface Simple to administer Scalability Next years collection Standard tools (MS Excel) Data collection to minimize systems overhead Data Collection Tool

8 Data Collection Tool Data Collection Tool

9 Data Collection Tool Data Collection Tool Type Population Branch Telecom Infr Telecom Rm TRUE TRUE TRUE TRUE TRUE Guards CCTV Access Barriers Generator TRUE TRUE TRUE TRUE

10 Model Overview Data Collection Data Map & Weighting Controls Category Roll-up History Location Overall Score Data Mapping Data Events Controls Data Population Single / Multi Story Tenant Access Food Prep Areas Parking Areas Server Rooms Bank Branch Infrastructure Loading Docks Electrical Rooms Fire Explosion Flooding Power Failure Water Loss Environmental Transportation Intruders Sabotage Communications Generators UPS Card Access Security Guards Redundant Systems Sump Pumps Vehicle Barriers CCTV Parking Management Vehicle Barriers

11 t Data Weighting Each mapped item is weighted based on it s influence to a given event. Two depths of weighting Component level - % of the overall influence on an event Subcomponent level - % of the individual components EVENT Fire Internal Intruder Internal BUILDING Food Servic ce Weight None Break Room Hot Food Serv ving Hot Food Pr rep n Full Kitche CONTROLS Acce ess Weight Access Code es` Turnstiles s Man Traps ss sion Card Acces Fire Suppress Equipmen hers s Weight None Fire Extinguis Halon Sprinklers 0% 9% % 0% 0% 20% % 0% 0% 7% % 0% Model Overview Data Collection Data Map & Weighting Controls Category Roll-up History Location Overall Score

12 Model Common and Controls scores are derived through the same calculation methods. Scores are calculated based on building characteristics which are mapped and weighted to specific events. Controls Scores are calculated based on existing facility controls which are mapped and weighted to specific events. Model Data Collected Weight Table Type TRUE Fire Suppression TRUE Food Service TRUE Guards TRUE Mapped Data Score Fire Total 94 Fire Food Service e Weight None Break Room Hot Food Serving Area Hot Food Prep Full Kitchen % TRUE Controls Total 92 Data Overall Score 93 Calculations Type of 2 Food Service 4 Fire Suppression 18 Security Guards 4 Weight

13 Model Overview Data Map & Weighting Data Collection Controls Category Roll-up History Location Overall Score Model History Scores are calculated based on the frequency of specific events which impacted normal business operations over the past twelve months. Facility Fire Flood Water Supply Power Combined Total Score A Internal A External B Internal B External C Internal C External

14 Model Overview Data Collection Data Map & Weighting Controls Category Roll-up History Location Overall Score Model Location Scores are calculated based on existing numbers and ratings provided by the authoritative sources which are scaled for with the assessment model. Facility EPA Cap Index Terrorism Vulnerability Rating Flood Zone Seismic Zone Tornado Zone Scaled Total A Within Moderate Risk B Within Low Risk C Outside Low Risk D Outside High Risk

15 Model Overview Data Collection Data Map & Weighting Controls Category Roll-up History Location Overall Score Model Category Roll-up Consolidated d scores for the four categories Transition point to final scoring Can be used to compare individual scores for a particular site Facility Controls Location History A B C

16 Model Overview Data Collection Data Map & Weighting Controls Category Roll-up History Location Overall Score Model Overall Score Breakout of score by category = Green =Yellow 0 79 = Red

17 Analysis & Reporting Four Levels of Reporting Executive Overview Discipline Specific Reports (Security, Safety, Facilities, Technology) Detailed Individual Facility Reports Department Level Notification Closing End Results Significant reduction in subjectivity Clean user interface Authoritative source backed data Controls based gap analysis Fact based data Benefits You can build it yourself Use tool you re already familiar with Minimal costs for authoritative data Customize to fit your industry

18 Thank You Brian Durand RBS / Citizens Bank N.A. Brian.Durand@RBSCitizens.com Mark Norton RBS / Citizens Bank N.A. Mark.A.Norton@RBSCitizens.com